samba - Aug 2020 - core dump from samba-tool when chnging user password

On Mon, Aug 24, 2020 at 11:57 AM James B. Byrne via samba <
samba at lists.samba.org> wrote:
>
>
> On Mon, August 24, 2020 11:17, James B. Byrne wrote:
> >
> > On the other hand, the errors I report are likely solvable should
> someone with
> > the ability to do so take note of them, so I am reporting this one.
> What I
> > want to know is whether this should be reported as a bug or whether
this
> > problem has been solved in a more recent version of Samba.  I am not
> prepared
> > to move from 4.10.15 until after the complete transition from the
> existing
> > domain and DC is complete.  But, if it has been fixed then that would
be
> useful
> > to know.
> >
>
> As it turns out this is not the first report of this problem.  It is
> evidently
> related to the talloc port in FreeBSD and may, or may not, have to do with
> jails.  There are open bug reports respecting this on the FreeBSD bugzilla
> tracking system.
>
>
Out of curiosity, can you provide a link to one of the FreeBSD bug reports?
I believe the talloc port in FreeBSD uses arc4random() during talloc_init()
to calculate magic.

On Mon, August 24, 2020 12:48, Andrew Walker wrote:
>
> Out of curiosity, can you provide a link to one of the FreeBSD bug reports?
> I believe the talloc port in FreeBSD uses arc4random() during talloc_init()
> to calculate magic.
>
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=245707
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=248883

-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
   Unencrypted messages have no legal claim to privacy
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3

On Mon, Aug 24, 2020 at 12:52:58PM -0400, James B. Byrne via samba
wrote:
> 
> 
> On Mon, August 24, 2020 12:48, Andrew Walker wrote:
> >
> > Out of curiosity, can you provide a link to one of the FreeBSD bug
reports?
> > I believe the talloc port in FreeBSD uses arc4random() during
talloc_init()
> > to calculate magic.
> >
> 
> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=245707
> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=248883
valgrind should be able to help find #248883 I think.

On Mon, 2020-08-24 at 12:48 -0400, Andrew Walker via samba
wrote:
> On Mon, Aug 24, 2020 at 11:57 AM James B. Byrne via samba <
> samba at lists.samba.org> wrote:
> 
> > 
> > 
> > On Mon, August 24, 2020 11:17, James B. Byrne wrote:
> > > 
> > > On the other hand, the errors I report are likely solvable should
> > 
> > someone with
> > > the ability to do so take note of them, so I am reporting this
> > > one.
> > 
> > What I
> > > want to know is whether this should be reported as a bug or
> > > whether this
> > > problem has been solved in a more recent version of Samba.  I am
> > > not
> > 
> > prepared
> > > to move from 4.10.15 until after the complete transition from the
> > 
> > existing
> > > domain and DC is complete.  But, if it has been fixed then that
> > > would be
> > 
> > useful
> > > to know.
> > > 
> > 
> > As it turns out this is not the first report of this problem.  It
> > is
> > evidently
> > related to the talloc port in FreeBSD and may, or may not, have to
> > do with
> > jails.  There are open bug reports respecting this on the FreeBSD
> > bugzilla
> > tracking system.
> > 
> > 
> 
> Out of curiosity, can you provide a link to one of the FreeBSD bug
> reports?
> I believe the talloc port in FreeBSD uses arc4random() during
> talloc_init()
> to calculate magic.
A bit of an aside, but it would be incredibly awesome if the FreeBSD
port could adopt the same policy as, eg, Debian and not ship any
patches that are not upstream.

We do consider such patches, with justification, when submitted by or
on behalf of their authors.  See for example this recent MR submitted
by Debian: https://gitlab.com/samba-team/samba/-/merge_requests/1420

It makes assessing issues like this much easier.

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT          
https://catalyst.net.nz/services/samba

On Mon, August 24, 2020 22:19, Andrew Bartlett wrote:
>
> A bit of an aside, but it would be incredibly awesome if the FreeBSD
> port could adopt the same policy as, eg, Debian and not ship any
> patches that are not upstream.
>
> We do consider such patches, with justification, when submitted by or
> on behalf of their authors.  See for example this recent MR submitted
> by Debian: https://gitlab.com/samba-team/samba/-/merge_requests/1420
>
> It makes assessing issues like this much easier.
>
> Thanks,
>
> Andrew Bartlett
>
I believe that Timur has indeed submitted patches of this nature. I recall
reading that they were deemed unacceptable because of some security related
difficulty in namespacing attributable to ZFS or the kernel in FreeBSd.

This sort of stuff is out of my realm and I am going on memory from a comment
that I read in a FreeBSD samba bug report some time ago.  I am sure that a
direct communication with Timur will obtain the precise details.

-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
   Unencrypted messages have no legal claim to privacy
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3